AWS Config Rule Change

AWS Config provides a detailed view of the configuration of AWS resources in your AWS account. This includes how the resources are related to one another and how they were configured in the past so that you can see how the configurations and relationships change over time.

An AWS resource is an entity you can work with in AWS, such as an Amazon Elastic Compute Cloud (EC2) instance, an Amazon Elastic Block Store (EBS) volume, a security group, or an Amazon Virtual Private Cloud (VPC). For a complete list of AWS resources supported by AWS Config, see AWS Config Supported Resource Types and Resource Relationships.

With AWS Config, you can do the following:

• Evaluate your AWS resource configurations for desired settings.

• Get a snapshot of the current configurations of the supported resources that are associated with your AWS account.

• Retrieve configurations of one or more resources that exist in your account.

• Retrieve historical configurations of one or more resources.

• Receive a notification whenever a resource is created, modified, or deleted.

• View relationships between resources. For example, you might want to find all resources that use a particular security group.

https://docs.aws.amazon.com/config/latest/developerguide/WhatIsConfig.html